Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/90646_c7if7Juk91JL471U230JQ.roa
File:                     90646_c7if7Juk91JL471U230JQ.roa (raw, json)
Hash identifier:          Y/PkYJCWhUed5FqQjVt7UHrrB51x32K5N/nB0lxmt2s=
Subject key identifier:   F7:4E:B8:EB:F7:3B:89:FE:C9:BA:4F:75:24:BE:3B:D5:4D:B7:D0:94
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018EBE64ACE1885D746A1E84D2421A7A9FF0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/90646_c7if7Juk91JL471U230JQ.roa
Signing time:             Mon 08 Apr 2024 15:47:32 +0000
ROA not before:           Mon 08 Apr 2024 15:47:32 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     202662
IP address blocks:        82.152.160.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Thu 09 May 2024 10:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:be:64:ac:e1:88:5d:74:6a:1e:84:d2:42:1a:7a:9f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Apr  8 15:47:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f74eb8ebf73b89fec9ba4f7524be3bd54db7d094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ee:b7:2c:9a:65:3b:f2:52:3f:71:6c:03:29:
                    38:f0:ae:48:09:f1:5b:80:b5:db:bf:f7:7a:fa:85:
                    1a:9a:76:04:b1:bb:6b:16:e3:b6:da:f6:7f:cd:86:
                    4d:1f:51:0b:0b:72:47:e1:49:85:2a:3e:e3:2f:89:
                    1b:40:01:96:44:df:c6:3f:f8:1f:a0:a4:f5:6d:32:
                    6c:11:8a:4a:b3:83:78:0b:f8:61:a8:45:ba:25:71:
                    8d:bf:d1:57:13:78:40:10:e3:2e:37:ca:e9:01:60:
                    c6:09:46:de:03:1e:98:35:20:60:29:98:54:f6:f3:
                    a6:54:00:b3:2f:27:e8:20:0d:07:ea:d7:a0:d1:89:
                    04:b3:e6:46:f0:12:1d:4f:37:1f:79:48:72:9b:7f:
                    63:c9:84:81:12:b5:f5:28:d9:80:2c:71:c4:cd:bf:
                    d8:01:e9:db:5f:b8:43:de:32:2b:de:2d:d0:6c:bc:
                    a8:11:56:2f:3e:f3:ab:60:1c:ab:72:5a:37:12:38:
                    70:4e:e1:ad:ba:46:f1:cd:3c:99:85:a6:6d:0b:4a:
                    86:74:b8:ac:97:f1:5d:fa:a5:6a:90:c7:db:eb:56:
                    aa:cf:3d:09:2e:74:24:99:f4:1e:60:6a:e9:fd:34:
                    74:03:00:52:4c:54:13:dc:cd:4d:cd:f0:96:48:45:
                    dc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4E:B8:EB:F7:3B:89:FE:C9:BA:4F:75:24:BE:3B:D5:4D:B7:D0:94
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/90646_c7if7Juk91JL471U230JQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.152.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:59:7f:8a:68:fd:f4:96:50:70:85:ef:dc:3f:15:c8:02:ed:
         4d:bd:0c:82:5d:11:76:c5:e2:4e:20:14:24:2a:bd:cc:13:02:
         8e:10:a1:65:a3:03:3e:52:33:8d:32:0f:63:c6:85:4f:f4:d0:
         ad:8e:70:64:7c:56:f0:c2:df:a5:de:3d:2b:1d:1b:e9:72:d3:
         f0:e0:59:35:bb:1e:ff:6c:d9:45:c3:c0:23:c9:1b:97:22:a5:
         38:86:37:38:b0:b7:35:8b:df:57:39:21:09:f3:57:e4:0b:4c:
         c9:9c:c7:cb:fb:3e:d8:f4:20:65:26:0e:5c:ff:54:02:98:ae:
         fc:c6:cd:79:db:70:43:98:d6:4c:16:7f:33:52:77:13:e0:8f:
         c7:0b:82:4f:b7:d3:6c:0d:c5:c6:1b:b8:37:67:cc:a8:f9:3e:
         47:81:c2:cd:89:74:20:4d:66:b6:ec:35:e1:10:6d:fd:a4:d6:
         53:07:91:a5:4c:f1:17:ef:1b:74:1f:37:db:95:7b:09:da:a5:
         5c:75:41:5f:30:af:ac:7e:ca:b9:94:7e:30:34:2d:09:1d:c0:
         fb:8b:81:92:4c:f8:42:c9:e2:41:87:09:54:f0:2d:90:19:f6:
         ed:af:60:3d:65:0d:5b:a4:92:4b:d7:7f:92:0a:5e:db:18:61:
         c9:ec:17:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:20 2024 by rpki-client on console-ams.rpki-client.org